NAME

PKCS7_dataFinal — move data from a BIO chain to a ContentInfo object

SYNOPSIS

#include <openssl/pkcs7.h> int
PKCS7_dataFinal(PKCS7 *p7, BIO *chain);

DESCRIPTION

PKCS7_dataFinal() transfers the data from the memory BIO at the end of the given chain into the appropriate content field of p7 itself or of its appropriate substructure. It is typically used as the final step of populating p7, after creating the chain with PKCS7_dataInit(3) and after writing the data into it. After calling PKCS7_dataFinal(), the program can call BIO_free_all(3) on the chain because such chains are not designed for reuse. Depending on the contentType of p7, PKCS7_dataFinal() sets the following fields:

for SignedData or DigestedData:

in substructures of the content field of p7: the content field in the ContentInfo structure (unless p7 is configured to store a detached signature) and the encryptedDigest fields in all the SignerInfo structures

for EnvelopedData or SignedAndEnvelopedData:

the encryptedContent field in the EncryptedContentInfo structure contained in the content field of p7

for arbitrary data:

the content field of p7 itself

RETURN VALUES

PKCS7_dataFinal() returns 1 on success or 0 on failure. Possible reasons for failure include:

• p7 is NULL.
• The content field of p7 is empty.
• The contentType of p7 is unsupported.
• The chain does not contain the expected memory BIO.
• Signing or digesting is requested and p7 is not configured to store a detached signature, but does not contain the required field to store the content either.
• At least one signer lacks a usable digest algorithm.
• Signing or digesting fails.
• Memory allocation fails.

Signers lacking private keys do not cause failure but are silently skipped.

SEE ALSO

BIO_new(3), PKCS7_dataInit(3), PKCS7_final(3), PKCS7_new(3), PKCS7_sign(3)

HISTORY

PKCS7_dataFinal() first appeared in SSLeay 0.9.1 and has been available since OpenBSD 2.6.

CAVEATS

This function does not support EncryptedData. Even though this function is typically used after PKCS7_dataInit(3) and even though PKCS7_dataInit(3) also supports reading from ContentInfo structures that are already fully populated, do not use PKCS7_dataFinal() on fully populated structures. It is only intended for putting data into new structures and it is neither needed nor suitable for reading.